CVE-2019-10955

Affected products: Rockwell Automation MicroLogix 1400 (Series A, B up to v15.002), MicroLogix 1100 (v14.00 and earlier), CompactLogix 5370 L1/L2/L3 controllers (up to v30.014), including GuardLogix. Vulnerability type: open redirect in the controller web server that could be exploited by a remot...

CVE-2019-10955: URL Redirection to Untrusted Site

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers...

Multiple Rockwell Automation Products Input Validation Error Vulnerability

Rockwell Automation MicroLogix 1400 Controllers Series A and others are a programmable logic controller from Rockwell Automation. The input validation error vulnerability exists in multiple Rockwell Automation products and stems from a networked system or product that does not properly validate...

Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: MicroLogix 1400 and CompactLogix 5370 Controllers Vulnerability: Open Redirect 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote...

Rockwell Automation MicroLogix 1100 Denial of Service (CVE-2017-7924)

A denial of service vulnerability exists in Rockwell MicroLogix 1100 controllers. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted CIP packet to an affected device, causing a system crash...

Rockwell Automation MicroLogix 1400 and 1756 ControlLogix Denial of Service (CVE-2018-17924)

A denial of service vulnerability exists in Rockwell MicroLogix 1400 Controllers and 1756 ControlLogix Ethernet/IP Communications Modules. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted CIP connection request packet to an affected device, causi...

Rockwell Automation Allen Bradley Micrologix 1400 Series Access Control Information Disclosure (CVE-2017-14462)

An Information Disclosure vulnerability exists in Rockwell Automation Allen Bradley Micrologix 1400 Series. A remote, unauthenticated attacker can exploit the vulnerability by sending crafted packets to the target system causing access control and information disclosure...

DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)

A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands PCCC packet to the controller that could potentially cause the controller to enter a DoS condition. MicroLogix 1100 controllers are affected: 1763-L16BWA, 1763-L16AWA,...

Denial of Service Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation MicroLogix 1400 Controllers Series A and others are programmable logic controllers from Rockwell Automation. A security vulnerability exists in several Rockwell Automation products that stems from a lack of authentication in the program. An attacker could exploit this...

Rockwell Automation MicroLogix Detection (EtherNet/IP)

Detection of Rockwell Automation MicroLogix PLC SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rockwell Automation MicroLogix Detection Consolidation

Consolidation of Rockwell Automation MicroLogix detections. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

Design/Logic Flaw

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

CVE-2018-17924

CVE-2018-17924 affects Rockwell Automation MicroLogix 1400 Controllers (Series A/B/C) and 1756 ControlLogix EtherNet/IP Communications Modules. The vulnerability allows an unauthenticated remote actor to initiate a CIP connection and push a new IP configuration, potentially disrupting system comm...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

PT-2018-2759

Name of the Vulnerable Software and Affected Versions Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules affected versions not specified Description The issue is related to a lack of authentication for a critical function in the MicroLogix 1400 and 1756...

CVE-2018-17924: Missing Authentication for Critical Function

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules Vulnerability: Missing Authentication for Critical Function 2. REPOSTED INFORMATION This...

Rockwell Automation MicroLogix

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low skill level to exploit. Vendor : Rockwell Equipment : MicroLogix Controller Vulnerabilities : Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause denial of service,...